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A JAN 1982 
MEMORANDUM FOR: See Distribution 


FROM: Harry E, Fitzwater 
Deputy Director for Administration 


SUBJECT : Information Security Oversight Office (1S00) 
Draft of Proposed New Executive Order to 
Replace E.0. 12065 


REFERENCE; Multiple addressee memorandum from DDA dated 
29 October 1981; Same Subject (DDA 81-0300/13) 


1. Attached for your review is the latest ISOO draft revision to 
Executive Order 12065. Also attached are the comments the Agency submitted 
on the previous ISOO draft, based on your response to the reference 
memorandum. The check-marked comments have been incorporated in the latest 
draft. Other significant changes in this draft include: 


a. Section 1-302. The "aggregate" classification provision 
has been reworded in a way that may possibly restrict its 
application. 


b. Section 1-303. The identity of a confidential foreign 
source has been added as one of the types of information 
presumed to cause damage to the national security if 
disclosed. 


c. Section 1-502. A portion-marking requirement has been 
put back into the order, limited to documents transmitted 
outside the originating agency. 


d. Section 3-404. The requirement for D/ISOO review of all 
mandatory declassification review procedures has been 
dropped. 

e. Section 6-106. The definition of "'confidential source" 
has been expanded to include "jeopardy." 


2. We plan to resubmit, as appropriate, the previous Agency comments 
(those not check-marked) that are not incorporated in the latest ISOO draft. 
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STAT 
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Please telephone any additional comments or suggestions to STAT 
Records Management Division, Office of Information Services 
by COB 6 January 1982. 


ped ais 


tila Lai ey 
BRADY romaestap 


Harry E. Fitzwater 


Attachments: 
As stated 


Distribution: 


Director, National Foreign Assessment Center 
Deputy Director of Operations 

Deputy Director for Science and Technology 
Inspector General 

‘Chairman, DCI Security Committee 

Director of Security 

Chief, Classification Review Division, OIS 
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COMMENTS ON ISCO DRAFT OF EXECUTIVE ORDER 


A. Page 8, Section 1-303 


Change to read "Unauthorized disclosure of foreign government 
_ information, cryptologic information, or information relating to 
intelligence activities (including special activities), or intelligence 
sources or methods, is presumed to cause damage to the national 
security.” 


B. Page 9, Section 1-501 


Change to read "At the time of original classification the following ~ 
we shall be shown on the face of all classified documents or clearly associated 
with other forms of classified information in a manner appropriate to the 
media involved:"' - 


The parenthetical expression in 1. 501(a) and 1-501 (b) aust appear in 
the main paragraph of 1-501 in order to cover all the markings. ‘There 


are Circumstances in which any U.S. marking at a1] would reveal a 
confidential relationship. 


C. Page 16, Section 3-301 
Move Jast sentence into a new Section 3-303. 
D. Page 17, add Section 3-304 


far halla 3-304, Guidelines and procedures sstahiietiod pursuant to this section 
Ale ar shall be used by the Archivist of the United States and upon approval of the 
cee issuing authority, any Agency having custody of the information. 


E. Page 17, Section 3-401(b) 


Add "document or material containing the" in front of the word 
va "information". 
This increases the requirement for specificity by requesters under 
mandatory review. (The definition for "information" in Section 6-102 
does not serve the same purpose.) 


F. Page 20, Section 4-101 
Add "Agency heads shall issue and maintain minimun investigative 
standards that ust be satisfied before access to classified information 
is permitted.' 
Disparities and misunderstandings between agencies on 


what their standards are would be minimized if this Executive order 
required them to be stated. 
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Page 21, Section 4-201 


Add after Director of Central Intelligence, "who shall ensure the 
establishment of common security, access, dissemination and control 


standards for such programs." 


Page 21, Section 4-202 


Delete entire section. 
This requirement is unclear, unnecessary and burdensome. 
Page 27, Section 5-402(a) | 
Change to read "knowingly, willfully or negligently, and without proper 


authority, disclose to unauthorized persons information ePRORe Ey: classified 
under this Order or predecessor orders." 


Page 28, Section 5-404 


Change last sentence to read "Each shall ensure that the Director of 
the Information Security Oversight Office is perog tear informed of 
violations under Section 5- a0) or (b)." 


Page 30, add Section 6-107 


6-107. "Cryptology," for the purposes of this Order, means 
cryptography and communications security. 


This definition reflects the current Intelligence Community 
understanding that the Director of Central Intelligence is responsible 
for the portion of intelligence sources and methods known as signals 
intelligence (SIGINT) and the Secretary of Defense is responsible for 
communications security (COMSEC) matters. 


Page 30, add Section 6-108 and 6-109 


- 6-108. "Unauthorized disclosure” includes either a communication or 
physical transfer of classified information to an unauthorized person, . 


6-109. "Unauthorized persons" are those who do not have both a 
current security clearance for access to the level of classified 
information involved and a specific, indentifiable need for access 
to the information involved in order to accomplish an official and — 
authorized government purpose. 
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| EXECUTIVE ORDER 


NATIONAL SECURITY INFORMATION 


| 
| 
| 
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EXECUTIVE ORDER 
NATIONAL SECURITY INFORMATION 


The interests of the United States and its citizens require 
that certain information concerning our national defense and foreign 
relations be protected against unauthorized disclosure. It also is 
geen that the public be informed about the activities of its 
Goveninient: This Order prescribes a uniform information security 

3 system for classifying, declassifying, and safeguarding national © 
security information. It also establishes a monitoring system to 
ensure {ts effectiveness. Nothing in this Order shall limit the 


~. protection afforded any information by other provisions of law. 
PART 1 
ORIGINAL CLASSIFICATION 
Il. ' Classification Levels. 
1-101. National security information that requires 
protection against unauthorized disclosure (hereinafter 
"classified information") shall be classified at one of the 


following three levels: 


(a) "Top Secret" shall be applied to information, the 


unauthorized disclosure of which reasonably could be 


1 
| 
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expected to cause crave.damage to the national 


security. 


- (b) "Secret" shall be applied to information, the 
unauthorized disclosure of which reasonably could be 
expected to cause serious damage to the national 


security. 


(c) "Confidential" shall be applied to information, the 
unauthorized disclosure of which reasonably could be 


expected to cause damage to the national security. 


1-102. Except as otherwise provided by statute, no other 


terms shall be used to identify classified information. 


1-103. If there is reasonable doubt about the need to 
classify information or whieh classification level is 
appropriate, the information shall be considered classified 
and shall be safecuarded as required for the higher level of 
classification under the provisions of this Order pending a | 


final determination by an original classification authority. 


Classification Authority. 


1-201. Top Secret. The authority to classify information 
originally as Top Secret may be exercised only by: 


233 
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(a) the President; 


(b) agency heads and officials designated by the 


President in the Federal Register; and 


(c) officials delegated this authority under Section 
1-204, 


1-202. Seeret. The authority to classify information 


originally as Secret may be exercised only by: 


(a) agency heads and officials designated by the 


President in the Federal Register; 


(b) officials with original Top Secret classification 


authority; and 


(c) officials delegated such authority pursuant to 


Section 1-204. 


. . 
oo on eee eg ene NE eR EL EA LN A, I a nr are nner ame me 


1-203. Confidential. The authority to classify information 


originally as Confidential may be exercised only by: | | 


-(a) agency heads and officials designated by the 


President in the Federal Register; 


“j= 
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(b) officials with original Top Secret or Secret 


classification authority; and 


(ce) officials delegated such authority pursuant to 


Section 1-204. 


1-204. Delegation of Original Classification Authority. 
(a) Delegations of original classification authority shall 
be limited to the minimum required to administer this 
Order. Agency heads are responsible for ensuring that 
designated subordinate officials have a demonstrable 


and continuing need to exercise this authority. 


(b) Original Top Secret classification authority may be 
delegated only by the President; an agency head or 
official designated pursuant to Section 1-201(b); and the 
‘senior official designated under Section 5-301(a), 
‘provided that official has been delegated original Top 


Secret classification authority by the agency head. 


(c) Original Seeret classification authority may be 
delegated only by the President; an agency head or 

. official designated pursuant to Sections 1-201(b) and 
1-202(a); an official with original Top Secret 
classification authority; and the senior official 


designated under Section 5-301(a), provided that official 


42 
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has been delegated original Secret classification 


authority by the agency head. 


(d) Original Confidential classification authority may 
be delegated only by the President; an agency head or 
official designated pursuant to Sections 1-201(b), 
1-202(a), and 1-203(a); an official with original Top 
Secret classification authority; and the senior official 
designated under Section 5-301(a), provided that official 
has been delegated original Seeret or Confidential 


classification authority by the agency head. 


(e) Each delegation of original classification authority 
shall be in writing. It shall identify the authority by 
name or position title. Delegated classification 


authority includes the authority to classify information 


| 
I 
| 
{ 
| 
| 
at the level granted and lower levels of classification. | 
1-205. Exceptional Cases. When an employee, contractor, | 
jiesnaee. or grantee of an agency that does not have | 
original-classification authority originates sifuemacen 
believed by that person to require classification, the | 
information shall be proteeted in a manner consistent with : 
this Order and its implementing directives. The 
information shall be transmitted promptly as provided 


under this Order or its implementing directives to the 


agency that has appropriate subject matter interest and 
252 
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dinssiticatien authority with respect to this information. 
That agency shall decide within thirty (30) days whether to 
classify this information. If it is not clear which agency . 
has classification responsibility for this information, it 
shall be sent to the Director of the Information Security 
Oversight Office. The Director shall consult with the 
agency determined to have primary subject matter interest 
in this information before making a classification 


determination. 
1-3. Classification Categories. 


1-301. Information shall be considered for classification if 


it concerns: 
(a) military plans, weapons, or operations; 
(b) the vulnerabilities or capabilities of systems, 
installations, projects, or plans relating to the national 
security; 


_ (ce) foreign government information; 


(d) intelligence activities (including special activities), 


or intelligence sources or methods; 


~6- ; 
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(e) foreign relations or ‘foreign activities of the United 


States; 


(f) scientific, technological, or economic matters 


relating to the national security; 


(g) United States Government programs for 


safeguarding nuclear materials or facilities; 
(h) cryptology; 
(i) a confidential source; or 


(j) other categories of information that are related to 


the national security and that require protection against 


unsuthorized disclesure as determined by the President- 
‘or by agency heads or other officials who have been 
delegated original classification authority by the 
President. Any determination made under this 
subsection shall be reported promptly to the Director of 


the Information Security Oversight Office. 


1-302. Information that, either by itself or in the 

aontext of other information, is determined to concern one 
or more of the categories in Section 1-301 shall be 
Siasstfted when an original elassification authority also 
determines that its unauthorized disclosure reasonably 


27 a 
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_ could be expected to cause’ damage to the national 


security. 


1-303. Unauthorized disclosure of foreign government 
information, the identity of a confidential foreign source, 
or information relating to intelligence sources or methods 


is presumed to cause damage to the national security. 


1-304. Information classified in accordance with Section 
1-3 shall not be declassified automatically as a result of 
any unofficial publicatim or inadvertent or unauthorized. 
disclosure in the United States or abroad of identical or 


similar information. 


14. Duration of Classification. 


1-401. Information shall be classified for as long as 
required by national security considerations. When it can 
be determined, a specific date cr event for declassification 
shall be set by the original classification authority at the 


time the information is originally classified. ~— 


1-402. Automatic declassification determinations under 
predecessor orders shall remain valid unless the 
classification is extended by an authorized official of the 
originating agency. These extensions may be by individual 
documents or categories of information. The agency shall 
-8- | . 
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be responsible for notifying holders of the information of 


such extensions. 


1-403. Informatio classified under predecessor orders and 
marked for declassification review shall remain classified 
until reviewed for declassification under the provisions of 


this Order. 


Identification and Markings. 


1-501. At the time of original classification, the following 
shall be shown on the face of all classified documents, or 
clearly associated with other forms of classified 
information in a manner appropriate to the medium 


involved: 


(a) the identity of the original classification authority 
if other than the person whose name appears as the 
approving or signing official (unless this information 
itself would reveal a confidential saurce or relationship 


not otherwise evident in the document or information); 


(b) the agency and office of origin (unless this 
information itself would reveal a confidential source or 
relationship not otherwise evident in the document or 


information); 
se 
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(ec) the date or event for declassification, or the 


_ notation "Originating Agency's Determination"; and 


(d) one of the thrée classification levels defined in 


Section 1-1. 


1-502. Each copy of a classified document that is 
transmitted outside the originating agency shall, by 
marking or other means, indicate which portions are 
classified, with the applicable classification level, and 
which portions are not classified. Agency heads may, for 
good cause, grant and revoke waivers of this requirement 
for specified classes of documents or information. The 


Director of the IS00 shall be notified of any waivers. 


1-503. Marking designations implementing the provisions 
of this Order, including abbreviations, shall conform to the 
standards prescribed in implementing directives issued by 


the Information Security Oversight Office. 


1-504. Foreign government information shall either retain 
its original classification or be assigned a United States 
classification that shall ensure a degree of protection at 
least equivalent to that required by the entity that 


furnished the information. 


#10= 
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1-6. Limitations on Classification. 


1-601. Classification shall be determined solely on the 
basis of national security considerations. In no case shall 
information be classified in order to conceal violations of 
law, inefficiency, or administrative error; to prevent 
ecibareausmantt to a person, organization, or agency; to 
restrain competition; or to prevent or delay the release of 
information that does not require protection in the interest 


of national security. 


1-602. The President or an agency head or official 
designated under Sections 1-201(b), 1-202{a) or 1-203(a) 
may re-classify information previously declassified and 
"disclosed if it is determined in writing that (a) the 
information requires protection in the interest of national 


security; and (b) the information may reasonably be 


recovered. 


1-603. Information may be classified after an agency has 
received a request for it under the Freedom of Information 
Act (5 U.S.C. 552) or the Privacy Act of 1974 (5 U.S.C. 
'552a), or the Mandatory Review provisions of this Order 
(Section 3-4) if such classification meets the requirements 
of this Order and is accomplished personally and on a 
document~by-document basis by the agency head, the 
deputy agency head, the senior agency official designated 
=11- 
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2-1. 


under Section 5-301(a), or an official with original Top 


Secret classification authority. 


‘PART 2 


DERIVATIVE CLASSIFICATION 


Use of Derivative Classification. 


2-101. Derivative classification is (1) the determination 
that information is in substance the same as information. 
currently classified, and (2) the application of the same 
classification markings. Persons who only reproduce, 
extract, or summarize classified information, or who only 
apply classification markings derived from source material 
or as directed by a classification guide, need not possess 


original classification authority. 


2~102.. Persons who apply derivative classification 


markings shall: 


(a) observe and respect original classification decisions; 


and 


(b) carry forward to any newly created documents any 
assigned authorized markings. The declassification date 


or event that provides the longest period of 
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classification shall be used for documents classified on 
the basis of multiple sources. 


2-2. Classification Guides. 


2-201. Agencies with original classification authority shall - 
prepare classification guides to facilitate the proper and 


uniform derivative classification of information. 


_ 2-202, Each guide shall be approved personally and in 


writing by an official who: 


(a) has program or supervisory responsibility over the 
information or is the senior agency official designated 


under Section 5~301(a); and 


‘(b) is authorized to classify information originally at 
the highest level of classification prescribed in the 


guide. 


2-203. Agency heads may, for good cause, grant and 
revoke waivers of the requirement to prepare 
classification guides for specified classes of documents or 
information. The Director of the Information Security — 


Oversight Office shall be notified of any waivers. 
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PART 3 
DECLASSIFICATION AND DOWNGRADING 


3-1. Deelassifieation Authority. 


3-101. Information shall be declassified or downgraded as 
soon as national security considerations permit. Agencies 
shall coordinate their review of classified information with 
other agencies that have a direct interest in the subject 
matter, Information that continues to meet the 
classification requirements prescribed by Section 1-3 

_ despite the passage of time will continue to be protected 


in accordance with this Order. 


3-102. Information shall be declassified or downgraded by. 
the official who anehoeesd the original classification, if 

' that official is still serving in the same position; the 
originator's successor; a supervisory official of either; or 
officials delegated such authority in writing by the agency 
head or the senior agency official aesieiated pursuant to 
Section 5-301(a). 


3-103. If the Director of the Information Security 
Oversight Office determines that information is classified 
in violation of this Order, the Director may require the 
information to be declassified by the agency that 


-ld- 
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originated the classification. Any such decision by the 
Director may be appealed to the National Security 
Council. The information shall remain classified until the - 


appeal is deeided. 


3-104. The provisions of this section shall apply to 
agencies that, under the terms of this Order, do not have 
original classification authority, but that had such 


authority under predecessor orders. 
3-2. Transferred Information. 


3-201. In the ease of classified information transferred in 
conjunction with a transfer of functions, and not merely 
for storage purposes, the receiving agency shall be deemed 


to be the originating agency for purposes of this Order. 


3-202. In the case of classified information that is not 
officially transferred as deseribed in Section 3-201, but 
that originated in an agency that has ceased to exist and 
for which there is no suecessor agency, each agency in 
possession of such information shall be deemed to be the 
originating agency for purposes of this Order. Such 
information may be declassified or downgraded by the 


agency in possession after consultation with any other 


oe oe 
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agency that has an interest in the subject matter of the 


information. 


3-203. Classified information transferred to the General 
Services Administration for accession into the Archives of 
the United States shall be declassified or downgraded by 
the Archivist of the United States in accordance with this 
‘Order, the directives of the Information Security Oversight 


Office, and the agency guidelines. 
3-3. Systematic Review for Declassification 


3-301. The Archivist of the United States shall, consistent 
with procedures prescribed in the Information Security 
Oversight Office's directives implementing this Order, 
systematically review for declassification (a) classified 
records accessioned into the National Archives of the 
United States, and (b) classified presidential papers or . 
records in the Archivist's possession and control Such 
information shall be reviewed by the Archivist for 
deelassification in accordance with systematic review 
guidelines that shall be provided by agency heads who 
originated the information, or in the case of foreign 
government information, by the Director of the 
Information Security Oversight Office in consultation with 


interested agency heads. The Secretary of Defense may 


-16- 
Approved For Release 2005/08/03 : CIA-RDP93B01194R001200030005-1 


Approved For Release 2005/08/03 : CIA-RDP93B011948001200030005-1 


establish special procedures for systematic review for 
declassification of classified eryptologic information, and 
the Director of Central Intelligence may establish special 
procedures for systematic review for declassification of 
classified information pertaining to intelligence activities, 
(ineluding special activities), or intelligence sources and 


_ methods, after consultation with affected agencies. 


3-302. Agency heads may conduct internal systematic 
review programs for classified information originated by 
their agencies contained in permanently valuable records 
that have not been accessioned into the National hedhives 


of the United States. ! 

| 

3-4, Mandatory Review for Declassification. . | 
} 


3-401. Except as provided in Section 3-402, all 
information classified under this Order or predecessor 
orders shall be subject to a review for declassification by 


the originating agency, if: 


(a) the request is made by a United States citizen or 
permanent resident alien, a federal agency, or a State 


_ or local government; and 


(b) the request describes the document or material 


containing the information with sufficient specificity to 


+ 
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enable the agency to locate it with a reasonable amount 


of effort. 


3-402. Information originated by a President, the White 
House Staff, by committees, commissions, or boards 
appointed by the President, or athers specifically providing 
advice and counsel to a President or acting on behalf of a 
President, including such information in the possession and 
control of the Administrator of General Services pursuant 
to sections 2107, 2107 note, or 2203 of title 44 U.S.C., is 
exempted from the provisions of section 3-401. The 
Archivist of the United States shall have authority to 
review and declassify such information. Review 
procedures developed by the Archivist shall provide for 
consultation with agencies having primary subject matter 
interest and shall be consistent with the provisions of 
applicable laws or lawful agreements that pertain to the 
respective presidential papers or records. Any decision by 


the Archivist may be appealed to the Director of the 


Information Security Oversight Office. Agencies with 


\ 


primary subject matter interest shall be notified promptly 
of the Director's decision on such appeals and may further 
appeal to the National Security Council through the 


process set forth in section 3-103. 


é 
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3-403. Agencies conducting a mandatory review for 
declassification shall danlassity information no longer 
requiring protection under this Order. They shall release — 
this information unless withholding is otherwise authorized 


under applicable law..: 


3-404. Agency heads shall develop procedures to process. 
requests for the mandatory review of classified 
information. These procedures shall apply to information 
classified under this or predecessor orders. They shall also 
provide a means for administratively appealing a denial of 
a mandatory review request. The Secretary of Defense 
shall develop special procedures for the review of 

a _ eryptologic information, and the Director of Central 
Intelligence shall develop special procedures for the review 
of information pertaining to intelligence activities 
(including special activities), or intelligence sources or 
methods, after consultation with affected agencies. The 
Archivist shall develop special procedures for the review 
of information accessioned into the National Archives of 


the United States. 


3-405. In response to a request for information under the 
Freedom of Information Act, the Privacy Act of 1974, or 


the Mandatory Review provisions of this Order: 
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(a) An agency shall refuse to confirm or deny the 
existence or non-existence of requested information 
whenever the fact of its existenee or non-existence is 


itself classifiable under this Order. 


(b) When an agency receives any request for documents 
in its custody that were classified by another agency, it 
shall refer copies of cha request and the requested 
documents to the originating agency for processing, and 
may, after consultation with the originating agency, 
inform the requester of the referral, In cases in which 
the originating agency determines in writing that g 
response under Section 3-405(a) is required, the 

=e referring agency shall respond to the requester in 


accordance with that Section. 


° PART 4 
SAFEGUARDING 
4-1. General Restrictions on Access. 


4-101. A person is eligible for access to classified 
information provided that a formal determination of 
trustworthiness has been made by agency heads or 


designated senior officials and provided that such access is 
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essential to the accomplishment of authorized and lawful 


Government purposes. 


4-102. Controls Shall be established by each agency to- 
ensure that classified information is used, processed, 
sored. reproduced, transmitted, and destroyed only under 
conditions that will provide adequate protection and 


prevent access by unauthorized persons. 


4-103. Classified information shall not be disseminated 
outside the executive branch except under conditions that 
ensure that the information will be given protection 


equivalent to that afforded within the executive branch. 
4-104. Except as provided by directives issued by the 


information originating in one agency may not be 
disseminated outside any other agency to which it has been 


i 
i 
President through the National Seeurity Couneil, classified | 
‘ 
{ 
{ 
| 
| 
! 
made available without the consent of the originating | 


agency. 


4-2. Special Access Programs. — 


4-201. Agency heads designated pursuant to Section 1-201 
may create special access programs to control access, 
distribution, and protection of particularly sensitive 


information classified pursuant to this Order or 
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predecessor orders. Such programs may be created or 
continued only at the written direction of these agency 
heads. For special access programs pertaining to 
intelligence activities (including special activities), or 
intelligence sources or methods, this function will be 
exercised by the Director of Central Intelligence. For 
special access programs pertaining to cryptology, this 


function will be exercised by the Secretary of Defense. 


4-202. Each agency head shall establish and maintain a 
system of accounting for special access programs. The 
Director of the Information Security Oversight Office shall 


have non-delegable access to all such accountings. 


4-3, Access by Historical Researchers and Former Presidential 


Appointees. 


4-301. The ssctilbanent in Section 4-101 that access to 
classified information may be granted only as is essential 
to the accomplishment of authorized and lawful 
Government purposes may be waived as provided in Section 


4-302 for persons who: 
(a) are engaged in historical research projects, or 


(b) previously have occupied policy-making positions to 


which they were appointed by the President. 


+ 


-22- 


Approved For Release 2005/08/03 : CIA-RDP93B01194R001200030005-1 


Approved For-&elease 2005/08/03 : CIA-RDP93B01194001200030005-1 
e 3 


4-302. Waivers under Section 4-301 may be granted only if 


the originating agency: 


- (a) determines in writing that access is consistent with 


the interest of national security; 


(b) takes appropriate steps to protect classified 
information from unauthorized disclosure or 
compromise, and ensures that the information is 


safeguarded in a manner consistent with this Order; and 


(ec) limits the access granted to former presidential 
appointees to items that the person originated, 
reviewed, signed, or received while serving as a 


presidential appointee. 


- 


PART 5 


IMPLEMENTATION AND REVIEW 


§-1. Policy Dire ‘tion. 


5-101. The National Security Council shall provide overall 


poliey direction for the information security program. 


5-102. The Administrator of General Services shall be 


responsible for implementing and monitoring the program 
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established pursuant to this Order. The Administrator 
shall delegate the implementation and monitorship 
functions of this program to the Director of the 


Information Security Oversight Office. 


Information Security Oversight Office. 


5-201. The Information Security Oversight Office shall 
have a full-time Director appointed by the Administrator 
of General Services subject to approval by the President. 
The Director shall have the authority to appoint a stafi for 


the Office. 
5-202. The Director shall: 


(a) develop, in consultation with the agencies, and 
promulgate, subject to the approval of the National 


Security Council, directives for the implementation of 


this Order which shall be binding on the agencies; 


(b) oversee agency actions to ensure compliance with 


this Order and implementing directives; 


{e) review all agency implementing regulations and 
’ ageney guidelines for systematic declassification 
review. The Director shall require any regulation or 


guideline to be changed if it is not consistent with this 
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Order or implementing directives. Any such decision by 
the Director may be appealed to the National Security 
Council. The agency regulation or guideline shall 


remain in effect until the appeal is decided; 


(d) have the authority to conduct on-site reviews of the 
information security program of each agency that 
generates or handles classified information and to 
require of each agency those reports, information, and 
other cooperation that may be necessary to fulfill the 
Director's responsibilities. If these reports, inspections, 
or access to specific categories of classified | 
information would pose an exceptional national security 
risk, the affected agency head or the senior official 
designated under Section 5-301(a) may deny access. The 
Director may appeal denials to the National Security 
Council The denial of access shall remain in effect 


until the appeal is decided; 


(e) review requests for original classification authority 
from agencies or officials not granted original 
classification authority and, if deemed appropriate, - 


recommend presidential approval; 


' (f) consider and take action on complaints and 


suggestions from persons within or outside the 
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Government with respeet to the administration of the 


information security program; 


(g) have the authority to prescribe, after consultation 
with affected agencies, standard forms which will 
promote the implementation of the information security 


program; 


(h) exercise case-by-case classification authority in 


accordance with Section 1-205; 


(i) report annually to the President through the 
National Security Council on the implementation of this 


Order; and 


(j) have the authority to convene and chair interagency 
meetings to discuss matters pertaining to the 4 


information security program: 
5-3. General Responsibilities. 


5-301. Agencies that originate or handle classified 


information shall: 


‘ {a} Designate a senior agency official to direct and 
administer its information security program, which shall 
include an active oversight and security education 
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program to ensure effective implementation of this 


Order; 


(ob) promulgate implementing regulations. Any 
unclassified regulations that establish agency 
information security policy shall be published or 
incorporated by reference in the Federal Register to the 


extent that these regulations affeet members of the 


public; and 


(c) establish procedures to prevent unnecessary access 
to classified information, including procedures that {a) 
require that a demonstrable need for access to 
classified information is established before initiating 
administrative clearance procedures, and (b) ensure that 
the number of persons granted access to classified , 
information is limited to the minimum number that is 
consistent with operational and security requirements. 


and needs. 


Sanctions. 


5-401. If the Director of the Information Security 
Oversight Office finds that a violation of this Order or its 
implementing directives may have oceurred, the Director 


shall make a report to the head of the agency or to the 
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senior official designated under Section 5-301(a) so that 


corrective steps, if appropriate, may be taken. 


5-402. Officers and employees of the United States 
Government shall be subject to appropriate sanctions if 


they: 


(a) knowingly, willfully, or negligently disclose to 
unauthorized persons information properly classified 


under this Order or predecessor orders; 


(b) knowingly and willfully classify or continue the 
classification of information in violation of this Order 


or any implementing directive; or 


(ce) knowingly and willfully violate any other provision 


of this Order or implementing directive. 


§-403. Sanctions may include reprimand, suspension 
without pay, removal, termination of classification 
authority, or other sanction in accordance with applicable 


law and agency regulation. 


5-404. Each agency head or the senior official designated 
under Section 5-301(a) shall ensure that appropriate and 


prompt corrective action is taken whenever a violation 
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under Seetion 5-402 occurs. Either shall ensure that the 
Director of the Information Security Oversight Office is 
promptly notified whenever a violation under Section 


§-402(a) or (b) occurs. 
PART 6 
GENERAL PROVISIONS 
f= Definitions. 


6-101. "Agency”™ has the meaning provided at 5 U.S.C, 


552(e). 


6-102. "Information" means any information or material, 
regardless of its physical form or characteristics, that is 
owned by, produced by, produced for, or is under the 


control of the United States Government. 


6-103. "Classified information" means information that 
has been determined pursuant to this Order or any 
predecessor order to require protection against 


unauthorized disclosure and that is so designated. 
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6-104. "Foreign government information” means: 


(a) Information provided by a foreign government or 
governments, an international organization of 
governments, or any element thereof with the 
expectatin, expressed or implied, that the information, 
the source of the information, or both, are to be held in 


eonfidence; or 


(b) any information produced by the United States 
pursuant to or as a result of a joint arrangement, with a 
foreign government or organization of governments, © 
requiring that the information, the arrangement, or both 


be held in confidence. 


6-105. "National security" means the national defense 


and/or foreign relations of the United States. 


6-106. "Confidential source’ means any individual or 
organization which has provided, or which may reasonably 
be expected to provide, information to the United States 
on matters pertaining to the national security with the 
expectation, expressed or implied, that the information or 
relationship, or both, be held in confidence. It also means 
farormation that if disclosed, could reasonably be expected 
to reveal a confidential source, thereby placing the life or 


safety of an individual in jeopardy. 
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6-2. 


6-107. "Original Classification" means an initial 
determination that iitormation requires, in the interest of 
national security, a specific degree of protection against 
unauthorized disclosure, together with a classification - 


designation signifying the level of protection required. 


_ General, 


6-201. Nothing in this Order shall supersede any 
requirement made by or under the Atomic Energy Act of 
1954, as amended. "Restricted Data” and "Formerly 
Restricted Data" shall be handled, protected, classified, ; 
downgraded, and declassified in conformity with the 
provisions of the Atomic Energy Act of 1954, es amended, 


and regulations issued under that Act. 


6-202. The Attorney General, upon request by the head of. 
an agency or the Director’ of the Information Security 
Oversight Office, shall personally or through authorized 
representatives of the Department of Justice render an 
interpretation of this Order with respect to any question 
arising in the course of its administration. 

6-203. Executive Order No. 12065 of June 28, 1978; the 
accompanying presidential Order of June 28, 1973; 
Information Security Oversight Office Implementing 


Directive No. 1 of October 2, 1978; and Section 5-209 of 


ace 
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Executive Order No. 12148 of July 20, 1979, are revoked as 


of the effective date of this Order. 


6-204. This Order shall become effective on BS tg 


ee 
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